Free Juniper JN0-331 Exam Dumps Questions & Answers

Which two external authentication server types are supported by JUNOS Software for firewall user authentication? (Choose two.)

• A.  LDAP
• B.  TACACS+
• C.  IIS
• D.  RADIUS

Click the Exhibit button.
[edit security]
user@host# show
ike {
policy ike-policy1 {
mode main;
proposal-set standard;
pre-shared-key ascii-text "$9$GFjm5OBEclM5QCuO1yrYgo"; ## SECRET-DATA
}
gateway remote-ike {
ike-policy ike-policy1;
address 172.19.51.170;
external-interface ge-0/0/3.0;
}}
ipsec {
policy vpn-policy1 {
proposal-set standard;
}
vpn remote-vpn {
ike {
gateway remote-ike;
ipsec-policy vpn-policy1;
}}}
Assuming you want to configure a route-based VPN, which command is required to bind the VPN
to secure tunnel interface st0.0?

• A.  set ike policy ike-policy1 bind-interface st0.0
• B.  set ipsec vpn remote-vpn bind-interface st0.0
• C.  set ike gateway remote-ike bind-interface st0.0
• D.  set ipsec policy vpn-policy1 bind-interface st0.0

Where do you configure SCREEN options?

• A.  zones on which an attack might arrive
• B.  zones you want to protect from attack
• C.  interfaces on which an attack might arrive
• D.  interfaces you want to protect from attack

You want to allow all hosts on interface ge-0/0/0.0 to be able to ping the device's ge-
0/0/0.0 IP address.
Where do you configure this functionality?

• A.  [edit security interfaces]
• B.  [edit interfaces]
• C.  [edit security zones]
• D.  [edit system services]

Using a policy with the policy-rematch flag enabled, what happens to the existing and new sessions when you change the policy action from permit to deny?

• A.  The new sessions matching the policy are denied. The existing sessions, not being allowed to carry any traffic, simply timeout.
• B.  The new sessions matching the policy are denied. The existing sessions continue until they are completed or their timeout is reached.
• C.  The new sessions matching the policy are denied. The existing sessions are dropped.
• D.  The new sessions matching the policy might be allowed through if they match another policy. The existing sessions are dropped.